SSHFP RR supports neither ECDSA algorithm nor SHA-256 fingerprint defined by RFC 6594.

[bishopb]

The following code should work, but fails because kyhwana.org exposes both the ECDSA algorithm and SHA-256 fingerprint.

$google = new \Net_DNS2_Resolver(['nameservers' => ['8.8.8.8', '8.8.4.4']]);
$google->dnssec = true;
try {
    $result = $google->query('kyhwana.org', 'SSHFP');
} catch(\Net_DNS2_Exception $ex) {
    die($ex->getMessage());
}

foreach ($result->answer as $answer) {
    if ($answer instanceof \Net_DNS2_RR_SSHFP) {
        printf(
            '%s %d %s %s %d %d %s' . PHP_EOL,
            $answer->name,
            $answer->ttl,
            $answer->class,
            $answer->type,
            $answer->algorithm,
            $answer->fp_type,
            $answer->fingerprint
        );
    }
}

See also this post on SO, which led me to the problem in the first place.

[mikepultz]

Thanks for the patch- I've merged your changes in trunk,

Mike